← back
CVE-2022-23943CWE-190CWE-787

mod_sed: Read/write beyond bounds

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 50%
exploitation probability
50%top 1% of all CVEs
observed exploitation
nono source reports it
In short

A flaw in Apache's mod_sed module allows attackers to write data beyond the intended memory boundaries, potentially corrupting the server's memory and causing it to crash or behave unpredictably.

Technical detail

An out-of-bounds write vulnerability in mod_sed permits an attacker to overwrite heap memory via a crafted request, exploiting improper bounds checking in the sed stream editor module. The vulnerability affects Apache HTTP Server versions 2.4.52 and earlier; successful exploitation may lead to denial of service or arbitrary code execution depending on memory layout and attacker control over written data.

Summary generated and translated by AI from the official description.
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.